$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: SXZvYWyFzyyIC//FS3ntqqa9Pm/rXKqwD8pKJ4zC8KQ= Subject key identifier: B0:B2:30:4B:E3:D5:AB:C6:DF:0C:6C:7B:2F:76:C5:93:A1:32:45:36 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 3ADCDEA1EA0E9BB2EC07EC8A254B718B4DBA0DFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 0457 Signing time: Fri 22 Nov 2024 09:02:07 +0000 Manifest this update: Fri 22 Nov 2024 08:57:07 +0000 Manifest next update: Mon 25 Nov 2024 13:20:07 +0000 Files and hashes: 1: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: h7IiV0kh9O/RK06uMG1rhN5D8mRuZrUlThAbqSxDils=) 2: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: mAylxMr8+d8mR8LWIKVq/3AjBIk2gwxyYbF7kLOA17c=) 3: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=) 4: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: C1Nje0O10CcRkLBlAqAtyvi51cY1pDzus8indWiTpmM=) 5: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nGOhkS+SCCrJt9wmjNL7Gorc9U1h3Xuifw+uaNxyRl4=) 6: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: KC/48KyBK866tyRqnFAk104o6NtYIjI9BYH4NY1WGf4=) 7: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: BuvczQEbe/bdskV+ebbMfwgi2QgHhXaT52MUJAQ4Uu4=) 8: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: b3QtB4OgqdRWfaRrhbvsm6gH1TsKPXL5Yz9+wyHqUXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:de:a1:ea:0e:9b:b2:ec:07:ec:8a:25:4b:71:8b:4d:ba:0d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Nov 22 08:57:07 2024 GMT Not After : Nov 25 13:20:07 2024 GMT Subject: CN=B0B2304BE3D5ABC6DF0C6C7B2F76C593A1324536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:13:dc:95:e0:29:e0:65:51:c5:3c:cd:82: 1a:6c:0f:52:7d:86:63:67:f1:37:7c:bb:78:28:75: fa:1e:2d:b5:c8:e8:b2:61:0c:ff:4a:5d:2c:01:e7: 83:17:cc:de:55:01:a7:8f:f0:a6:ce:2b:0f:21:71: 72:0c:b6:58:46:76:75:ec:6a:29:c7:b1:8f:7b:e0: 36:8b:bc:d2:2a:d3:ed:13:b0:a5:0d:dc:b4:82:f0: 3d:2e:12:84:d0:68:dd:36:32:ae:e5:0c:ba:02:e1: 4a:06:92:00:3a:05:d4:c2:17:2e:32:85:06:7d:4d: b5:5e:b3:51:eb:20:ed:40:1c:e5:91:99:fe:47:73: 82:95:7d:a3:4f:41:01:89:6d:21:4e:0e:e5:68:58: 5b:73:8f:3b:78:c5:e8:e6:16:af:70:d9:4c:f0:7d: 01:32:f8:1a:fe:d9:f1:c8:28:35:57:74:75:64:d0: 9f:d8:0a:d7:47:20:0a:18:99:42:bc:77:de:4e:a1: 92:8b:84:60:20:23:b2:80:8a:b1:ed:ec:7b:88:1f: da:c2:e5:72:f7:9e:1e:0e:ac:2b:30:ce:ab:f3:08: 90:7d:02:da:41:8e:e8:3b:88:f5:79:ba:33:a6:d0: 9a:a6:ad:59:c1:fe:e6:c6:10:17:fd:30:6d:5d:23: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B2:30:4B:E3:D5:AB:C6:DF:0C:6C:7B:2F:76:C5:93:A1:32:45:36 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:b0:05:0a:27:21:c1:ea:07:6b:a6:aa:bc:c5:2b:fa:a0: 11:90:14:01:3a:98:cf:be:c4:5b:c7:de:29:26:58:42:98:57: 6a:82:41:67:56:f3:4e:90:3d:93:51:7c:1f:5e:b4:0b:9b:22: c5:37:f8:d1:c6:ca:0a:4f:fa:01:cc:04:ba:a0:b2:7e:2d:62: d1:40:cd:64:c1:c2:0f:1d:e3:49:fd:31:7c:78:2f:7a:00:b1: 5d:04:3e:3d:4b:64:81:1f:b8:6b:0d:13:e4:88:4e:4d:fb:d3: 52:12:84:e2:41:e4:0d:20:28:14:69:ed:a9:d9:73:63:41:38: 17:68:61:6b:4d:1d:d7:22:09:8b:34:15:b6:34:8d:9d:09:7d: f4:5d:de:bd:6b:6f:c8:26:61:46:a9:1d:70:3b:e3:65:50:15: 01:fc:d4:b4:9e:f0:f3:06:d4:34:4c:03:2d:95:e6:e3:87:04: d8:b3:18:6b:73:70:16:d9:34:92:ce:1d:9e:fa:78:cc:c1:17: 1f:22:0d:0f:72:03:ec:b1:f5:ea:bc:33:ea:e9:bc:29:25:4e: af:9a:6b:fb:c8:9c:7d:cd:97:7e:00:e6:4d:3d:c1:18:f0:2d: 09:98:e6:70:80:fa:67:c9:07:8b:04:70:20:13:50:11:dc:ff: 3c:a4:3f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtzeoeoOm7LsB+yKJUtxi026Df0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNDExMjIwODU3MDdaFw0yNDExMjUxMzIwMDdaMDMxMTAvBgNV BAMTKEIwQjIzMDRCRTNENUFCQzZERjBDNkM3QjJGNzZDNTkzQTEzMjQ1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTxPcleAp4GVRxTzNghpsD1J9 hmNn8Td8u3godfoeLbXI6LJhDP9KXSwB54MXzN5VAaeP8KbOKw8hcXIMtlhGdnXs ainHsY974DaLvNIq0+0TsKUN3LSC8D0uEoTQaN02Mq7lDLoC4UoGkgA6BdTCFy4y hQZ9TbVes1HrIO1AHOWRmf5Hc4KVfaNPQQGJbSFODuVoWFtzjzt4xejmFq9w2Uzw fQEy+Br+2fHIKDVXdHVk0J/YCtdHIAoYmUK8d95OoZKLhGAgI7KAirHt7HuIH9rC 5XL3nh4OrCswzqvzCJB9AtpBjug7iPV5ujOm0JqmrVnB/ubGEBf9MG1dI3QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsLIwS+PVq8bfDGx7L3bFk6EyRTYwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi8sAUKJyHB6gdrpqq8xSv6oBGQFAE6mM++ xFvH3ikmWEKYV2qCQWdW806QPZNRfB9etAubIsU3+NHGygpP+gHMBLqgsn4tYtFA zWTBwg8d40n9MXx4L3oAsV0EPj1LZIEfuGsNE+SITk3701IShOJB5A0gKBRp7anZ c2NBOBdoYWtNHdciCYs0FbY0jZ0JffRd3r1rb8gmYUapHXA742VQFQH81LSe8PMG 1DRMAy2V5uOHBNizGGtzcBbZNJLOHZ76eMzBFx8iDQ9yA+yx9eq8M+rpvCklTq+a a/vInH3Nl34A5k09wRjwLQmY5nCA+mfJB4sEcCATUBHc/zykP/U= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org